Identify runtime and security vulnerabilities in codebases during reviews.
npx skills add https://github.com/mway/dotfiles --skill safety-check
Please help me install this Agent Skill. Skill: safety-check Source: https://github.com/mway/dotfiles/tree/main/home/dot_codex/skills/safety-check Command: npx skills add https://github.com/mway/dotfiles --skill safety-check
Audits codebases for runtime safety and security vulnerabilities to prevent defects before commits and during reviews.
Audit your codebase now by applying the safety-check workflow to identify and remediate runtime and security issues.
High-intent search queries and answers about installing and using this skill.
Audit codebases for runtime vulnerabilities by applying a structured safety checklist covering nil/null dereferences, race conditions, resource leaks, bounds checks, integer overflows, uninitialized values, panics, and deadlocks during code reviews or pre-commit checks.
Detect OWASP Top 10+ security issues during code reviews by checking for injections, authentication gaps, data exposure, input validation errors, and cryptography pitfalls using a structured security safety checklist referenced by the audit workflow.
Prevent security defects before commits by running a safety audit that identifies runtime issues and OWASP Top 10+ threat areas across languages, providing practical remediation guidance aligned with a central safety checklist.
This safety audit works across languages and projects, applying a unified checklist to identify runtime safety issues and security vulnerabilities without requiring language-specific static analysis tool configurations.
Audit code for deadlocks and resource leaks by applying the runtime safety checklist, which systematically scans for concurrency issues, memory leaks, uninitialized values, and error handling gaps across your codebase.
A structured checklist ensures comprehensive coverage of both runtime safety issues and OWASP Top 10+ security vulnerabilities, preventing missed defects during code reviews and pre-commit checks across diverse languages and projects.
InverterNetworkAnalyze repositories with pygount to calculate lines of code and language distribution.
kagentiScan project dependencies, source code, and documentation for known CVEs.
giang6283623Perform threat-model-led security reviews of source code, APIs, and authentication logic.
voidrotConfigure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.
